Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/1E143AA26E7D11EFBB48F63EC4F9AE02.roa
File: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (raw, json)
Hash identifier: lZ6AOIyl3S5M47ndOuSHTErSZa7F4BYm3WORE1Zw2mg=
Subject key identifier: 81:32:3B:AE:42:A2:F2:BB:E8:A8:D8:7F:5B:9F:AF:8C:D2:D4:B5:68
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 052F
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/1E143AA26E7D11EFBB48F63EC4F9AE02.roa
Signing time: Mon 09 Sep 2024 07:37:09 +0000
ROA not before: Mon 09 Sep 2024 07:37:09 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 141681
IP address blocks: 103.161.242.0/24 maxlen: 24
103.170.17.0/24 maxlen: 24
2400:bde0::/32 maxlen: 32
2400:bde0::/48 maxlen: 48
2400:bde0:0:100::/56 maxlen: 56
2400:bde0:0:100::/60 maxlen: 60
2400:bde0:0:108::/64 maxlen: 64
2400:bde0:1::/48 maxlen: 48
2400:bde0:1:150::/64 maxlen: 64
2400:bde0:2::/48 maxlen: 48
2400:bde0:100::/46 maxlen: 46
2400:bde0:100::/48 maxlen: 48
2400:bde0:3000::/46 maxlen: 46
2400:bde0:3000::/48 maxlen: 48
2400:bde0:4000::/44 maxlen: 44
2400:bde0:4000::/45 maxlen: 46
2400:bde0:6000::/46 maxlen: 46
2400:bde0:6004::/46 maxlen: 46
2400:bde0:8000::/44 maxlen: 45
2400:bde0:8000::/45 maxlen: 47
2400:bde0:8008::/46 maxlen: 46
2400:bde0:8008::/47 maxlen: 47
2400:bde0:8010::/44 maxlen: 45
2400:bde0:8010::/45 maxlen: 47
2400:bde0:8018::/46 maxlen: 46
2400:bde0:8018::/47 maxlen: 47
2400:bde0:8020::/44 maxlen: 45
2400:bde0:8020::/45 maxlen: 47
2400:bde0:8028::/46 maxlen: 46
2400:bde0:8028::/47 maxlen: 47
2400:bde0:8030::/44 maxlen: 45
2400:bde0:8030::/45 maxlen: 47
2400:bde0:8038::/46 maxlen: 46
2400:bde0:8038::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Sep 9 07:37:09 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66dea5a4-a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:76:1c:d8:6c:9a:a2:37:95:0f:6a:a3:7a:
b3:17:28:ec:8d:d9:c7:98:0d:12:3d:5c:4f:50:ea:
a3:46:0c:f7:9c:75:32:8c:ff:22:8c:cb:81:59:1f:
04:01:54:8c:3d:40:db:1a:73:1c:fa:89:57:ae:9a:
7e:5d:24:6c:87:e7:49:c0:16:90:79:98:d7:b1:18:
99:39:ff:ae:80:d9:f1:a0:84:16:51:ae:f6:70:b8:
70:5b:c8:59:4e:67:9d:93:52:c0:24:c0:04:0f:bd:
d7:66:de:bc:f5:2b:04:54:43:19:d1:5b:5d:f8:2e:
d3:f9:b7:5f:3e:7a:71:10:23:34:d4:56:58:0a:12:
9c:b4:d9:9d:d1:f1:2d:94:aa:ad:48:44:f9:5b:c1:
2d:59:05:f5:0e:37:ee:69:94:09:22:79:9d:71:22:
a4:67:e9:a1:ba:99:7b:3c:0b:b6:9b:a9:3d:c0:49:
44:14:4a:29:f0:e8:a3:ad:7b:01:36:da:26:4c:a5:
9d:f2:a2:f0:19:16:3a:7e:51:b2:94:3a:2b:f1:88:
80:df:b2:7f:cc:e0:8f:1b:a8:35:b3:59:62:8d:05:
cc:fc:7e:00:a9:1c:29:d3:2d:6a:bc:b0:a8:a2:1a:
c4:4b:75:a3:e2:d4:bc:a8:ca:e8:a0:c6:9e:9b:2f:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:3B:AE:42:A2:F2:BB:E8:A8:D8:7F:5B:9F:AF:8C:D2:D4:B5:68
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/1E143AA26E7D11EFBB48F63EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.242.0/24
103.170.17.0/24
IPv6:
2400:bde0::/32
Signature Algorithm: sha256WithRSAEncryption
30:dc:05:3e:ed:6f:f0:de:04:12:ed:69:c1:2f:c1:6d:88:62:
2d:3c:ec:f5:7e:90:f9:3d:7c:d3:ca:45:ba:83:e6:fb:1f:e4:
3d:b6:ec:e2:59:c3:fe:6e:11:6e:14:7e:c8:1c:76:75:11:ff:
fe:a2:2e:04:a0:72:68:b4:06:97:db:f8:da:bc:19:85:39:5a:
1e:cd:5d:0c:8e:f9:28:d5:67:25:35:e7:8c:b1:7d:21:00:81:
64:be:25:7d:08:64:28:4c:5a:e8:ec:f6:9b:6d:54:96:d1:8d:
2f:d0:20:1b:29:90:81:ae:00:ea:f5:f6:19:bf:33:35:cc:31:
42:31:2c:05:58:82:4d:2f:d4:e3:60:88:e3:86:4c:cc:d8:93:
07:d5:7d:bc:07:9b:d5:c9:ea:af:de:9d:ed:a0:8e:0b:ab:1c:
c9:d1:9f:54:0b:81:f8:09:1b:05:4f:7f:cd:06:ab:e4:97:89:
c9:13:0f:7c:95:ce:cd:47:65:23:2b:61:96:3f:ac:ae:9b:7a:
1c:07:ea:50:59:8c:d4:bb:50:1e:7d:05:c5:36:e1:a2:89:53:
77:9a:f9:e1:0f:95:e7:c4:2b:90:4a:b9:03:11:42:72:b1:da:
ae:47:16:01:36:61:3b:61:91:ff:50:e2:21:f0:a9:b1:51:fc:
46:7f:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org